Матвій

MATVIY PELEKH
MATVIY PELEKH
HERZLIYA, ISRAEL KHARKIV,
HERZLIYA,
● KHARKIV, UKRAINE
ISRAEL ☎ UKRAINE [open contact info](look above in the "contact info" section)

DETAILS PROFILE
DETAILS
Herzliya PROFILE
I am a SOC Analyst with hands-on experience monitoring and investigating security
Israel events across endpoint,
withnetwork,
hands-onidentity, and cloud environments. Experienced with
Kharkiv
Herzliya
Kharkiv I am a SOC Analyst experience monitoring and investigating security
SIEM
eventsand EDR/XDR solutions such as IBM QRadar, CrowdStrike Falcon, Microsoft
[open contact info](look above in the "contact info" section)
+972 Israel 1132
Ukraine
[open contact info](look above in the "contact info" section)
Ukraine across endpoint, network, identity, and cloud environments. Experienced with
[open contact info](look above in the "contact info" section)
[open contact info](look above in the "contact info" section) Defender,
SIEM and Cortex
EDR/XDRXDR, and SentinelOne.
solutions such as IBM QRadar, CrowdStrike Falcon, Microsoft
[open contact info](look above in the "contact info" section)
[open contact info](look above in the "contact info" section)
[open contact info](look above in the "contact info" section)
[open contact info](look above in the "contact info" section) Defender, Cortex XDR, and SentinelOne.
[open contact info](look above in the "contact info" section)
[open contact info](look above in the "contact info" section) My daily work includes analyzing security logs, investigating suspicious authentication
SKILLS activity,
My dailyendpoint alerts analyzing
work includes and network events,
security andinvestigating
logs, identifying true and false
suspicious positives. I
authentication
enjoy learning new technologies, solving security problems, and working in environments
activity, endpoint alerts and network events, and identifying true and false positives. I
SKILLS
IBM QRadar SIEM where every investigation can be different. Highly motivated to continue developing my
enjoy learning new technologies, solving security problems, and working in environments
IBM QRadar SIEM cybersecurity skills, gain more
where every investigation experience,
can be and grow
different. Highly as part to
motivated of continue
a professional security
developing my
CrowdStrike Falcon team.
cybersecurity skills, gain more experience, and grow as part of a professional security
CrowdStrike Falcon team.
Microsoft Defender
Microsoft Defender
Cortex XDR
Cortex XDR
SentinelOne
SentinelOne EDUCATION
FortiGate
EDUCATION
Cyber Security Ethical Hacking course, HackerU, Tel Aviv
FortiGate
Check Point Aug 2023 — MarEthical
2024 Hacking course, HackerU, Tel Aviv
Cyber Security
Check Point Aug
Microsoft Entra ID Web2023 — Mar 2024Windows Server, Linux, Cisco, OSI, TCP/IP, SIEM SOC,
Fundamentals,
Microsoft Entra ID Web/Application Penetration
Web Fundamentals, WindowsTesting
Server, Linux, Cisco, OSI, TCP/IP, SIEM SOC,
Okta / Microsoft 365
Web/Application Penetration Testing
Okta / Microsoft 365 ThriveDX Certification, ThriveDX
Alert Triage
Alert Triage Detecting Certification,
ThriveDX vulnerabilitiesThriveDX
and creating PT Reports
Log Analysis
Detecting vulnerabilities and creating
c PT Reports
rts
Log Analysis High school degree, Atid Raziel,
Raziel Herzliya
Herzliya
Incident Investigation
Sept
High 2017 — degree,
school Jun 2023 Atid Raziel,
Raziel Herzliya
Incident Investigation
Threat Intelligence Sept 2017 —
Computer Jun 2023
Science and Software Engineering major
Threat Intelligence Computer Science and Software Engineering major
TCP/IP & Networking
TCP/IP & Networking EMPLOYMENT HISTORY
MDR/SOC Analyst at QMasters, Tel Aviv
LANGUAGES
Jun 2026 - Present
MDR/SOC Analyst
LANGUAGES
Russian Monitor, triage, and investigate security alerts using IBM QRadar SIEM.
Jun 2026 - Present
Russian Investigate endpoint activity with CrowdStrike Falcon, Microsoft Defender, Cortex XDR, and
Monitor, triage, and investigate security alerts using IBM QRadar SIEM.
Hebrew SentinelOne.
Investigate endpoint activity with CrowdStrike Falcon, Microsoft Defender, Cortex XDR, and
Analyze authentication, firewall, VPN, endpoint, network, and cloud security logs.
Hebrew SentinelOne.
English Investigate brute-force attempts, suspicious logins, malware, PowerShell activity, privilege
Analyze authentication, firewall, VPN, endpoint, network, and cloud security logs.
escalation, and network anomalies.
English Investigate brute-force attempts, suspicious logins, malware, PowerShell activity, privilege
Perform IOC and threat-intelligence analysis of IP addresses, domains, URLs, and file hashes.
Ukrainian escalation, and network anomalies.
Document findings, determine true/false positives, and escalate confirmed incidents.
Perform IOC and threat-intelligence analysis of IP addresses, domains, URLs, and file hashes.
Ukrainian
SECURITY TOOLS
SECURITY TOOLS Support Specialist at Tabit, Yakum
SIEM / EDR / XDR
Windows Security
SIEM / EDR Logs
/ XDR
Jun2024
Jul 2024--Jul
Jun2026
2026
Authentication
Windows SecurityLogs
Logs Analyzed system and application logs using ELK for troubleshooting and incident investigation.
IOC / IOA Analysis
Authentication Logs Investigated HTTP traffic and performed root-cause analysis across network and MDM environments.
MITRE ATT&CK Configured and troubleshot network settings, tunnels, and connectivity issues.
IOC / IOA Analysis
Threat ATT&CK
Hunting Handled escalations and resolved critical incidents under time-sensitive conditions.
MITRE
Digital
ThreatForensics
Hunting
Digital Forensics